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Steps Performed By Security Analysis Module 



Step 304 



Step 308 



Step 310 



Step 312 



Step 314 



Step 316 



Step 320 



Step 324 



Detect Security Event 




N 



Transmit Query to Data Monitor 



Receive Query 
Response from Data Monitor 



Analyze Data 
Associated with Query Response 




Report Analysis 



FIG. 3 
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Steps Performed By Threat Analysis Engine 



Step 604 


Detect Security Event 
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Step 608 


Determine Parameters Associated 


with Security Event 
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Step 612 


Determine Type of Security Event 
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Step 616 


Assign Rating to Security Event 
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Step 620 


Assign Software Flag to Security Event 



FIG. 6 
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Steps Performed By Data Monitor 



Step 804 



Step 808 



Step 810 



Step 812 



Step 814 



Step 816 



Step 820 



Detect Security Event 



Transmit Query to Client 



Receive Query 
Response from Client 



Analyze Data 
Associated with Query Response 



Transmit Additional Query 
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Step 824 



Report Analysis 



FIG. 8 



